diff --git a/ci-tools/vulnerability-scan b/ci-tools/vulnerability-scan
index 6a84fa544d2494a15e0ba10919641d262a4637b4..d1b7a12e7baa358ab15fd55a23f09dd3a3a7dc57 100755
--- a/ci-tools/vulnerability-scan
+++ b/ci-tools/vulnerability-scan
@@ -1,6 +1,6 @@
 #!/usr/bin/env sh
 
-set -eo pipefail
+set -xeo pipefail
 
 #
 # `morph build ...` output is like
@@ -20,6 +20,7 @@ OUTPUT=$1
 
 [ -e scan-target ] && rm -v scan-target
 nix-shell --run '
+set -x
 object=$(morph build morph/grid/testing/grid.nix 2>&1 | tail -n 1)
 ln -s "$object" scan-target
 '